$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: o0jVwCyk2on+EsypPHwa3HlognrPJfcEn85j5+EqoRY= Subject key identifier: 5D:8F:3F:D0:31:EE:3B:36:D5:01:4F:CD:15:72:AB:52:86:E8:0C:81 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 41C18F76A0C4766A991E033A14353D826CDFBB7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 22:11:12 +0000 Manifest this update: Sat 19 Jul 2025 22:06:12 +0000 Manifest next update: Tue 22 Jul 2025 22:29:12 +0000 Files and hashes: 1: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: qIHpbUdwSnoyrwsmmgFolLKsK1v+v3dNOJemJu3OCvQ=) 2: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 3: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 4: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 5: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 6: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 7: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c1:8f:76:a0:c4:76:6a:99:1e:03:3a:14:35:3d:82:6c:df:bb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Jul 19 22:06:12 2025 GMT Not After : Jul 22 22:29:12 2025 GMT Subject: CN=5D8F3FD031EE3B36D5014FCD1572AB5286E80C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:a7:bb:e9:d4:ff:26:7e:0d:d0:80:f8:71: 41:2d:fe:cf:5f:30:11:0d:79:28:5f:02:7b:63:63: 0b:9d:2a:41:2f:c9:f0:9e:eb:ce:35:db:37:3f:f3: da:44:a1:86:41:68:eb:2c:7c:94:92:86:6b:eb:e2: 35:42:e5:15:6e:97:f9:8f:2b:98:4a:bd:9b:06:21: 72:a6:ba:58:81:80:8e:1d:4b:44:82:e0:6d:4b:27: 86:b7:78:90:f4:36:61:53:f4:85:00:a9:ad:70:c3: 52:c1:16:d0:a4:bc:47:c6:31:f2:78:ad:a3:1d:95: 3d:72:78:76:68:7b:02:3f:e7:aa:a6:b6:1b:7e:96: 35:d0:34:bf:b8:8f:f1:6c:5e:fd:c4:11:9f:b3:bb: 71:be:04:0e:f7:80:91:77:85:e6:c9:09:f2:38:5f: a8:4e:1f:af:fb:de:33:a6:1f:cb:41:fc:31:64:35: 39:65:fc:15:08:26:c7:ab:fa:4b:32:a9:8b:30:21: 69:b1:27:08:bb:c9:40:07:44:36:25:de:3b:af:ba: c5:63:32:8f:81:ed:08:d9:71:10:f4:4f:2c:54:65: a7:73:71:9f:e5:3e:b5:c3:99:37:d7:6d:1a:07:28: b1:95:bd:30:2d:78:d0:f5:ec:d5:2f:bf:e2:2d:72: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8F:3F:D0:31:EE:3B:36:D5:01:4F:CD:15:72:AB:52:86:E8:0C:81 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:79:b9:7d:cd:6b:4b:9f:99:68:b8:e8:be:7c:9c:4b:19: 82:6c:a4:32:0a:fd:3e:df:7d:fc:c7:8a:60:aa:55:cb:a5:9f: b3:ea:a5:a9:18:5f:ad:3b:cc:3a:4b:d3:3f:6d:36:af:21:2d: 1f:3d:8f:d4:de:08:14:1d:ab:bb:78:1e:57:db:59:85:92:4c: 56:c4:33:cd:24:b6:5d:f8:b3:82:12:48:3a:a0:d3:49:bc:e3: 8f:c7:4a:af:f2:33:3d:01:e8:36:ca:cc:45:22:50:2d:20:1b: 38:97:f9:86:c5:f1:1d:7f:58:51:32:1a:ad:14:56:74:a5:c5: 36:5f:31:04:fc:6c:d8:97:b8:f8:da:83:f2:41:5b:c4:ba:ad: 87:a3:71:0f:a8:05:00:5a:c7:a3:6d:a8:13:e7:68:dd:91:39: 4c:86:61:39:7d:07:80:ae:4c:23:0b:b8:aa:51:eb:26:26:87: 9e:44:d7:e8:de:82:74:d0:b0:85:64:97:d8:64:65:8e:18:38: 98:41:49:ab:ae:2d:19:94:4d:a4:9e:d3:98:23:47:df:7f:b8: 4d:53:83:a6:d5:3e:28:3a:e7:fe:80:f1:c5:23:ef:b0:3d:87: 38:9a:58:1a:d5:33:20:0a:ea:9f:2e:5c:0f:51:50:c8:ba:f6: 03:b7:d3:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcGPdqDEdmqZHgM6FDU9gmzfu38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA3MTkyMjA2MTJaFw0yNTA3MjIyMjI5MTJaMDMxMTAvBgNV BAMTKDVEOEYzRkQwMzFFRTNCMzZENTAxNEZDRDE1NzJBQjUyODZFODBDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfh6e76dT/Jn4N0ID4cUEt/s9f MBENeShfAntjYwudKkEvyfCe68412zc/89pEoYZBaOssfJSShmvr4jVC5RVul/mP K5hKvZsGIXKmuliBgI4dS0SC4G1LJ4a3eJD0NmFT9IUAqa1ww1LBFtCkvEfGMfJ4 raMdlT1yeHZoewI/56qmtht+ljXQNL+4j/FsXv3EEZ+zu3G+BA73gJF3hebJCfI4 X6hOH6/73jOmH8tB/DFkNTll/BUIJser+ksyqYswIWmxJwi7yUAHRDYl3juvusVj Mo+B7QjZcRD0TyxUZadzcZ/lPrXDmTfXbRoHKLGVvTAteND17NUvv+ItcvybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXY8/0DHuOzbVAU/NFXKrUoboDIEwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8Iebl9zWtLn5louOi+fJxLGYJspDIK/T7f ffzHimCqVculn7PqpakYX607zDpL0z9tNq8hLR89j9TeCBQdq7t4HlfbWYWSTFbE M80ktl34s4ISSDqg00m844/HSq/yMz0B6DbKzEUiUC0gGziX+YbF8R1/WFEyGq0U VnSlxTZfMQT8bNiXuPjag/JBW8S6rYejcQ+oBQBax6NtqBPnaN2ROUyGYTl9B4Cu TCMLuKpR6yYmh55E1+jegnTQsIVkl9hkZY4YOJhBSauuLRmUTaSe05gjR99/uE1T g6bVPig65/6A8cUj77A9hziaWBrVMyAK6p8uXA9RUMi69gO304k= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:46 2025 by rpki-client